GSA/https

Stars
241
Rank 167,643 (Top 4 %)
Language
Python
License
Other
Created almost 10 years ago
Updated over 1 year ago

GSA/https

GSA

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

The HTTPS-Only Standard for federal domains (M-15-13), and implementation guidance.

HTTPS Everywhere for the U.S. Government

The American people expect government websites to be secure and their interactions with those websites to be private.

This site contains a web-friendly version of the White House Office of Management and Budget memorandum M-15-13, "A Policy to Require Secure Connections across Federal Websites and Web Services", and provides technical guidance and best practices to assist in its implementation.

Read the policy.

Please open an issue to leave feedback or suggestions. Pull requests are welcome to pages other than the homepage, which shows the final policy and is not subject to change through GitHub.

Thank You For Your Feedback

This policy was open for public comment before its finalization. It received numerous comments whose thoughtfulness and feedback improved the final policy.

You can see what changed between the proposal and the final policy in pull request #108.

The homepage of this site is the final policy. The other pages on https.cio.gov are open for contribution at any time, and are intended to be resources for agencies implementing the HTTPS policy.

Developing on the site locally

If you're using this repository to run the site locally, instructions follow below.

Dependencies:

Node 6+ to install USWDS and dependencies
Ruby and bundler to install / run Jekyll

First-time setup

npm install to install the USWDS, and Gulp dependencies.
npm install -g gulp to let you use the gulp CLI directly.
bundle install to install Jekyll.

Running the app

If you'll be editing the Sass/CSS:

gulp watch

To run the app:

bundle exec jekyll serve

Public domain

This project is in the worldwide public domain. As stated in CONTRIBUTING:

This project is in the public domain within the United States, and copyright and related rights in the work worldwide are waived through the CC0 1.0 Universal public domain dedication.

All contributions to this project will be released under the CC0 dedication. By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.

data

Assorted data from the General Services Administration.

datagov-wptheme

Data.gov WordPress Theme (obsolete)

data.gov

Main repository for the data.gov service

code-gov-web

DEPRECATED 🛑- Federal Source Code policy implementation.

govt-urls

Most government websites end in .gov or .mil, but many do not. This repo contains USA.gov's list of public government domains and URLs that don't end in .gov or .mil.

fedramp-automation

FedRAMP Automation

digitalgov.gov

Digital.gov — Helping the government community deliver better digital services.

pdf-filler

PDF Filler is a RESTful service (API) to aid in the completion of existing PDF-based forms and empowers web developers to use browser-based forms and modern web standards to facilitate the collection of information.

plainlanguage.gov

A resource to help federal employees write in plain language and comply with the Plain Writing Act of 2010

project-open-data-dashboard

Project Open Data Dashboard

code-gov

An informative repo for all Code.gov repos

accessibility-for-teams

A ‘quick-start’ guide for embedding accessibility and inclusive design practices into your team’s workflow

openacr

OpenACR is a digital native Accessibility Conformance Report (ACR). The initial development is based on Section 508 requirements. The main goal is to be able to compare the accessibility claims of digital products and services. A structured, self-validated, machine-readable documentation will provide for this.

piv-guides

This is the old location for the PIV Playbook. New location below.

search-gov

Source code for the GSA's Search.gov search engine

modernization

Report to the President on IT Modernization

slash-developer-pages

A lightweight listing of /developer pages in government, including embed-ready html code and structured xml.

code-gov-api

API powering the code.gov source code harvester

sf-sandbox-post-copy

A framework for managing automation tasks that are fired upon sandbox refresh in Salesforce orgs.

AI-Assistant-Pilot

Inter-agency Federal AI Personal Assistant Pilot

touchpoints

Feedback platform for continuous improvement of systems, services, processes, and policy.

resources.data.gov

Resources for open data and enterprise data inventory management

open-gsa-redesign

A fresh start for open.gsa.gov.

fedramp-tailored

FedRAMP Tailored.

punchcard

Repository of synonyms, protected words, stop words, and localizations

code-gov-front-end

Front-end of code.gov

devsecops-example

Example implementation of the GSA DevSecOps Pipeline

cto-website

Tech at GSA website

federal-open-source-repos

Uses Javascript to query the Social Media Registry and GitHub APIs and list details about all federal open source code on GitHub

srt-fbo-scraper

Using machine learning to predict Federal IT procurement compliance with Section 508 Accessibility Standards

DataBeam

Generic RESTful Interface for databases

ckanext-geodatagov

data.gov extension

ficam-playbooks

The content on this repository was migrated to idmanagement.gov.

devsecops-cloud-custodian-rules

[WORK IN PROGRESS] A repo containing rule sets for cloud-custodian inside GSA AWS accounts. This repo does not contain cloud-custodian itself.

jobs_api

Allows you to tap into a list of current jobs openings with federal, state, and local government agencies. Jobs are searchable by keyword, location, agency, schedule, or any combination of these.

asis

ASIS (Advanced Social Image Search) indexes Flickr and MRSS images and provides a search API across both indexes.

Open-And-Structured-Content-Models

Open and structured content models drafted by a cross-agency working group.

Challenge_gov

training-pathway-data-practitioner

Open source training material for the GSA Data Science Practitioner Learning Program

Jupyter Notebook

fpki-guides

This is the old location for the FPKI Playbook. New location below.

recalls_api

NOT SUPPORTED. Allows you to tap into a list of car, drug, food, and product safety recalls. Recalls are searchable by keyword, issuing agency, date, UPC code, vehicle-specific attributes, or any combination of these.

catalog.data.gov

Development environment for catalog.data.gov

sdg-indicators-usa

U.S. National Reporting Platform for the Sustainable Development Goals

uswds-sf-lightning-community

A Salesforce Lightning Community Theme and related components built upon US Web Design System

DevSecOps

Base infrastructure for future DevSecOps environment in AWS

ficam-arch

This is the old location for the FICAM Architecture. New location below.

federal-website-index

A project to build and maintain a comprehensive listing of the public websites of the U.S. federal government.

idmanagement.gov

IDManagement.gov is a collaboration between GSA and the Federal CIO Council. It is managed by the Identity Assurance and Trusted Access Division in the GSA Office of Government-wide Policy.

ckanext-usmetadata

A CKAN extension for inventory.data.gov

jenkins-shared-library-examples

emerging-technology-atlas

Emerging Citizen Technology

piv-conformance

Tool to verify conformance to the PIV data model per most recent releases of FIPS 201 and associated publications

GitHub-Administration

GSA's administration and implementation of github.com/gsa

security-benchmarks

GSA Security Benchmarks and Tools

jenkins-deploy

deploy Jenkins to AWS with Terraform and Ansible

sam-design-system

ansible-os-win-2016

Ansible Roles for Windows Server 2016

ckanext-datagovtheme

Theme for Data Catalog

gsa-doc-digital-signature

This tool is deprecated. Please follow these new procedures - https://playbooks.idmanagement.gov/signfedregister/

catalog-app

Development environment for catalog.data.gov

IAE-Architecture

Repository for IAE architectural documents.

inventory-app

Docker image for ckan app powering inventory.data.gov

usagov-benefits-eligibility

Benefits eligibility estimator tool for USAGov.

site-scanning-engine

The repository for the rearchitected site-scanning project, specifically the scanning engine itself.

ITDB-schema

IT Dashboard submissions schema, documentation and example files.

data-strategy

Federal data strategy website

citizenscience.gov

This is the new build of CitizenScience.gov using Jekyll on Federalist. Feel free to contribute or submit an issue!

digital-strategy

Machine-readable schema for describing action items within the president's digital strategy, and for reporting on its progress

digital-strategy-report-generator

Generates reports to describe agencies' progress in realizing the goals of the President's Digital Government Strategy

github-federal-stats

Bash scripts to generate metrics on U.S. Federal usage of GitHub using the GitHub APIs

SF-Event-Monitoring-Log-Retrieval

Python-based utility to fetch Salesforce Event Monitoring Logs and store them locally for consumption by log monitoring and analytics software.

ngx-uswds

USWDS Components in Angular

EDX

GSA Enterprise Digital Experience (EDX)

AI_Grand_Challenge_For_Resiliency

AI Grand Challenge for Resiliency: Impact of U.S. Government Policy on COVID-19 using Natural Language Processing & Text Analytics

Mobile-Code-Catalog

Source code from around, inside, and outside the federal government that can be helpful to federal agencies building mobile apps.

Open-Data-Collaboration-Sandbox

A sandbox for loose collaboration on assorted open data projects

cloudgov-demo-postgrest

Get a federally-compliant REST API for your CSV data on cloud.gov in about 60 seconds. ATO not included.

laptop-management

ALPHA/WIP for OSquery configuration for Mac and Linux Operating Systems

ckan-php-manager

A tool for managing a CKAN data catalog

innovation.gov

Deprecated - This project repo is no longer being maintained.

i14y

Search engine for agencies' published content

oscal-gen-tool

threat-analysis

grace-inventory

Lambda function to create an inventory report of AWS services as an Excel spreadsheet in an S3 bucket. Includes Terraform code to deploy it.

participation-playbook

US Public Participation Playbook

gsa-icam-card-builder

ICAM Test Card Signer and Data Populator

fpkilint

Federal PKI, X.509 certificate linter

centers-of-excellence

All the excellent centers

Very-Simple-API

A barebones API

participate-nap4

Participate in the 4th U.S. National Action Plan for Open Government

ckan-php-client

A PHP client for the CKAN data catalog, used by https://github.com/GSA/ckan-php-manager

openacr-editor

With this tool, people can generate Accessibility Conformance Report in the OpenACR format.

devsecops-ekk-stack

Terraform that builds an EKK logging stack

coe-industry-day

Information on the Phase II Industry Day for the Centers of Excellence at USDA.

recruiter

Embeddable forms to recruit research participants. Sends results to a Google Sheet, deployed via Google Tag Manager.

code-gov-style

Deprecated - Style for code.gov including buttons, banners, and cards

oscal-ssp-to-word

ansible-https-proxy

Ansible role to set up nginx as a secure proxy

10x

[Deprecated] Website for the Office of Investments in GSA’s Technology Transformation Service

site-scanning

The central repository for the Site Scanning program